Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: zJxhEPnR2n0Kj40UAaWh9TaoL/nuLbJuv1+KD+9wf50=
Subject key identifier: A6:EC:11:11:04:45:23:B0:23:FB:23:32:93:90:F2:E5:A2:79:62:0A
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0198D5BBD593A4815269F4790883BE5E94A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 03DA
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: e9s0PS6jf8diRIwhsW8uxUpcdRq2f0qm5YtFe5u84oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d5:93:a4:81:52:69:f4:79:08:83:be:5e:94:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=a6ec1111044523b023fb23329390f2e5a279620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:40:c0:73:ed:e8:5e:8b:61:6f:79:5a:8e:
8b:a7:75:10:5c:d9:92:9a:e4:63:5f:91:5c:e7:3e:
d9:2c:ff:e2:16:21:dc:d3:84:73:59:fb:65:89:a0:
0a:08:99:bf:94:1f:ab:13:33:5a:c8:63:04:00:ce:
c3:3f:82:01:0d:98:2c:50:e3:d6:12:af:09:9c:a8:
ec:72:78:9b:cf:5a:31:3e:3b:57:26:b2:57:30:de:
cc:1d:01:9b:5c:41:8a:5a:0c:b5:9f:57:39:3d:57:
38:9f:6f:cb:fd:f2:26:c4:59:63:a4:4e:9f:b6:a1:
c6:12:55:5a:5b:1e:00:b2:57:8f:0d:b0:ab:28:cb:
67:bf:0c:ca:fe:b7:f4:83:bd:ee:73:d6:17:04:fb:
22:46:38:1b:f4:60:ac:55:2c:f5:d2:b0:6c:34:25:
14:38:c5:30:c9:34:0a:7a:6e:df:fe:ae:3f:91:85:
94:9e:9c:93:ad:af:c3:66:75:36:03:77:ed:ba:64:
c6:c1:ef:d0:0e:10:d1:34:9f:0b:27:74:91:fd:dd:
f7:8e:8d:45:c5:fa:28:21:02:7e:ba:0c:47:59:6e:
fd:a4:75:58:cd:08:3c:a9:b1:eb:ee:48:06:df:f2:
8c:77:1b:61:dc:fb:99:c7:90:aa:ca:a1:95:a3:8c:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EC:11:11:04:45:23:B0:23:FB:23:32:93:90:F2:E5:A2:79:62:0A
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:28:7e:63:2a:59:f9:f6:eb:1d:93:b2:5a:69:28:c6:21:02:
94:7a:e5:72:06:e1:40:94:10:17:84:94:66:d5:97:3c:eb:6a:
a4:e9:44:10:11:bd:c8:5a:dd:97:9b:95:f0:e4:ab:2c:77:1a:
43:e0:4c:e1:81:e6:76:71:ca:87:a5:9f:9e:d6:1e:8f:74:c6:
d4:ef:73:99:1e:89:1c:55:d6:bd:c0:b1:74:d7:3e:7d:e6:19:
6a:0f:1a:55:c8:e2:cc:99:6e:b0:3e:ac:7e:3c:cd:af:75:77:
70:b9:15:c6:81:36:0a:d2:3d:7b:5e:34:67:2e:47:90:89:c2:
86:ff:e6:65:f8:00:2a:48:b4:a4:b0:5b:ca:04:92:d3:82:8c:
67:a4:6c:c2:4c:68:a8:d5:22:e7:77:7a:38:c3:83:fe:65:32:
35:c9:3c:89:0c:cb:b1:7f:d9:ab:6e:d5:fb:04:f4:ff:44:3a:
a1:78:bf:4c:b4:f3:ec:b9:ec:bb:d9:e1:99:bc:41:3d:45:d9:
fd:df:94:b0:c6:3d:a7:56:71:c2:96:ea:d7:13:f1:2e:fc:45:
3d:60:54:d8:2b:4d:c2:6f:58:2c:69:9b:4c:da:7d:c3:ef:08:
0f:ff:d4:db:de:69:1e:21:e9:0b:6a:b5:de:d1:58:42:ee:92:
07:11:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:42 2025 by rpki-client